Before the plugin enters the chat.
Embedding jobs should not smuggle API keys into the indexer.
IIS needs embeddings to make hybrid search useful — but provider IDs, model strings, and API keys do not belong inside the indexer. Copying LLM Store logic into IIS creates two places to patch when a route changes.
The moment secrets live in both plugins, rotation becomes a coordination exercise instead of a single dashboard action.
What that feels like
- Embedding configuration tempts teams to duplicate provider logic in IIS.
- Secrets and model IDs drift between indexer and governance surfaces.
- Cost and fallback rules split across products that should stay independent.